Cyber Risk Management

Cybersecurity’s 3-Million-Person Workforce Shortage is Now a Risk Management Problem

Cybersecurity’s 3-million-person workforce shortage is now a risk management problem. The cybersecurity workforce needs and wants you!  Good news for many of us – but from an employer or strategic workforce planning perspective, this is problematic. There’s now a shortage of people qualified to protect data, systems, and operations. Worldwide, the cybersecurity workforce shortage is… Read more »

GSA’s proposed new rule to govern data breaches, government access, proprietary information, and contractor responsibilities

In November 2018, U.S. General Services Administration (GSA) published its intent to enact a new rule on the reporting of data breaches. GSA is the U.S. government’s lead contracting agency. GSA also manages many government-wide IT security programs, like FedRAMP and cloud.gov. The proposed rule will ensure that GSA, plus the agency customer, will have… Read more »

Privacy Framework: NIST is in the House.

This month, NIST kicked off a series of public meetings to highlight its efforts to create a voluntary Privacy Framework. Much in the same way it developed the Cybersecurity Framework, NIST is trying to achieve a technology-privacy balance within the guidance by crowdsourcing its way there.  By bringing in views from federal agencies, small businesses,… Read more »

FedRAMP: A Heavyweight Security Framework for Cloud Service Providers

You need FedRAMP if you want to prove your cloud services is secure enough for U.S. government data. Read the full September 6, 2018 article published on cybersecurityventures.com here. In its latest Compliance Report for Cybersecurity Ventures, Sera-Brynn shared how FedRAMP came into being, who should care, and why being FedRAMP-authorized is important for companies. “The… Read more »

We applaud the G-7 `fundamental elements’ that highlight an international commitment to fighting cyber bad actors

The Group of 7 (G-7) has published the “fundamental elements” of best practices in cybersecurity for public and private entities in the financial sector that highlights the international effort to protect global finance in the wake of a series of cyber bank heists and finance sector attacks. The G-7 is comprised of the U.S., Great… Read more »

Sera-Brynn CEO Rob Hegedus featured cybersecurity speaker at the National Risk Retention Association Conference

Sera-Brynn Chief Executive Officer Rob Hegedus will be a featured speaker on cybersecurity at the National Risk Retention Association 2016 National Conference in Chicago Sept. 28. The three-day conference from Sept. 27-29 will focus on the future of the insurance industry and self-insurance in particular as it adapts to the ever-changing technological challenges facing specific… Read more »

Sera-Brynn Executive To Compare Hacking to Organized Crime at National Conference

Heather Engel named a featured speaker at USA Risk Group conference in May. Sera-Brynn Executive Vice-President Heather Engel will carry the message that cyber hackers are the modern-day organized crime next month during her presentation as a featured speaker at a national risk management conference. Engel will be speaking at the USA Risk Group’s 10th… Read more »

Risk Management in Cyberspace

Going on the offensive against cyber crime You could say that cyber theft is the crime that keeps on giving — for thieves. It’s also the crime that keeps on taking — from businesses and their clients. For business owners, it’s not a matter of if they will get hit by cyber thieves, but when…. Read more »